$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: j7yFjlFEgRglcrvfZQWNFYcltcO2Su5o9kcXdQtNExo= Subject key identifier: 54:48:5E:22:56:CC:FE:E8:79:08:D6:1E:DD:15:AD:34:C1:AB:30:8D Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 0543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 0520 Signing time: Sun 19 Oct 2025 01:24:35 +0000 Manifest this update: Sun 19 Oct 2025 01:24:34 +0000 Manifest next update: Sun 26 Oct 2025 01:24:34 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: kR7CiRuP0InYtfW+oan5+o3oeDhJE2RIs7QfQVkdsVQ=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Oct 19 01:24:34 2025 GMT Not After : Oct 26 01:24:34 2025 GMT Subject: CN=68f43dd3-c996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:e9:56:0f:9e:2d:5a:7a:f5:c4:6d:13:42: ce:5c:25:fb:24:d2:e2:76:6e:1d:c4:67:b5:5a:68: 53:3b:ce:6c:86:43:35:12:7a:5b:62:08:36:3f:cb: 50:2d:f4:77:f6:bf:2f:ea:ab:2e:5b:09:da:4a:fe: 5b:24:c4:50:de:a7:a5:67:3d:7c:4b:17:0b:91:e1: 1a:45:69:32:18:6b:71:9c:00:f9:b3:ab:0b:40:6b: 3e:90:f7:54:0b:fd:ec:cf:b7:b6:bd:76:17:74:f4: 9a:13:38:e3:f1:50:14:2f:25:23:94:c0:2d:ef:e7: 1c:25:11:35:0d:36:7c:88:d4:7f:65:e2:5d:31:08: 5c:b4:91:c6:3b:cc:98:dc:02:04:41:44:19:e8:f2: f3:3e:0b:50:6a:17:34:6e:c5:d9:d6:83:8a:4f:6b: 05:54:9a:e3:4c:1a:c3:2c:d3:0a:51:36:47:9f:1f: b8:d3:0f:39:35:83:58:b7:ad:21:39:a8:10:a7:05: 2f:86:63:e2:1b:8a:7a:18:83:0e:c9:32:c5:d3:f1: de:4b:d7:ed:71:17:b7:a5:7f:b4:d1:2e:be:2d:fd: c8:69:c6:9b:26:08:48:25:2d:40:8c:e6:5b:4f:a3: 11:c6:3b:56:1e:9d:79:3c:72:c3:f9:4a:e8:67:24: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:48:5E:22:56:CC:FE:E8:79:08:D6:1E:DD:15:AD:34:C1:AB:30:8D X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a5:9e:a0:59:4a:54:32:b3:fa:50:6b:41:95:a1:b6:46:9d: 8f:12:6a:8b:c5:89:87:e3:b4:56:c7:c6:74:88:50:dc:20:fc: 80:f9:85:fa:41:4c:9e:8f:d7:03:13:10:80:e1:e0:e5:df:22: 44:d6:52:f7:48:48:69:ee:c5:77:56:32:17:bf:4e:9f:df:6c: 1d:ba:4b:91:7a:36:ba:b4:5b:95:b1:d7:96:b7:bc:2c:ca:ae: d1:95:59:95:21:18:68:94:4d:0c:b2:d7:28:ed:19:dd:6f:38: 03:1f:81:4e:57:09:0f:5b:db:f2:70:28:b7:e2:c7:86:03:f9: 68:e4:5a:83:04:a0:65:c9:38:25:11:cc:b5:0f:b1:d7:e2:2d: 5c:6a:f0:61:a8:06:27:69:4d:b9:c9:f3:56:81:4d:fb:c6:4c: d2:50:94:15:00:69:11:a3:95:4d:b0:4b:a4:44:62:39:d7:83: b8:37:b1:f8:3b:ee:15:0d:5d:98:ed:89:6b:96:57:db:98:ee: 33:97:f6:26:6b:4f:93:53:65:e5:14:e4:66:7e:51:39:e2:0b: 40:07:0d:31:2a:81:f0:9f:99:c7:58:70:3a:35:57:c5:d9:d3: 72:33:65:51:19:bc:64:f9:f0:ab:0a:66:18:ac:cf:20:7d:f5: ec:8e:fa:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUxMDE5MDEyNDM0WhcNMjUxMDI2MDEyNDM0WjAYMRYwFAYD VQQDEw02OGY0M2RkMy1jOTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoh/pVg+eLVp69cRtE0LOXCX7JNLidm4dxGe1WmhTO85shkM1EnpbYgg2P8tQ LfR39r8v6qsuWwnaSv5bJMRQ3qelZz18SxcLkeEaRWkyGGtxnAD5s6sLQGs+kPdU C/3sz7e2vXYXdPSaEzjj8VAULyUjlMAt7+ccJRE1DTZ8iNR/ZeJdMQhctJHGO8yY 3AIEQUQZ6PLzPgtQahc0bsXZ1oOKT2sFVJrjTBrDLNMKUTZHnx+40w85NYNYt60h OagQpwUvhmPiG4p6GIMOyTLF0/HeS9ftcRe3pX+00S6+Lf3IacabJghIJS1AjOZb T6MRxjtWHp15PHLD+UroZyT1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRIXiJW zP7oeQjWHt0VrTTBqzCNMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBApZ6gWUpUMrP6UGtBlaG2Rp2PEmqLxYmH47RWx8Z0iFDcIPyA+YX6 QUyej9cDExCA4eDl3yJE1lL3SEhp7sV3VjIXv06f32wdukuReja6tFuVsdeWt7ws yq7RlVmVIRholE0Mstco7RndbzgDH4FOVwkPW9vycCi34seGA/lo5FqDBKBlyTgl Ecy1D7HX4i1cavBhqAYnaU25yfNWgU37xkzSUJQVAGkRo5VNsEukRGI514O4N7H4 O+4VDV2Y7YlrllfbmO4zl/Yma0+TU2XlFORmflE54gtABw0xKoHwn5nHWHA6NVfF 2dNyM2VRGbxk+fCrCmYYrM8gffXsjvrT -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:52 2025 by rpki-client